Dashboards & Visualizations
Highlighted

How to list & query macros for definitions using the Splunk Javascript SDK?

New Member

Does anyone know how to query macros using the Javascript SDK? I would like to essentially have the app list and/or query the macros.conf files so that I can dynamically pull in macro names and definitions.

0 Karma
Highlighted

Re: How to list & query macros for definitions using the Splunk Javascript SDK?

SplunkTrust
SplunkTrust

Hi @afgibson84,

try below,

var service = new splunkjs.Service({username: "admin", password: "yourpassword"});
var definition= service.get('properties/macros/"your macro name" /definition')["body"]

View solution in original post

Highlighted

Re: How to list & query macros for definitions using the Splunk Javascript SDK?

Contributor

The answer above works for me.

0 Karma
Highlighted

Re: How to list & query macros for definitions using the Splunk Javascript SDK?

Path Finder

This works

0 Karma
Highlighted

Re: How to list & query macros for definitions using the Splunk Javascript SDK?

SplunkTrust
SplunkTrust

@felipesewaybricker , @vidhyaArumalla . Glad to hear 🙂 you could upvote and accept it as an answer

0 Karma
Highlighted

Re: How to list & query macros for definitions using the Splunk Javascript SDK?

Moderator
Moderator

Hi @afgibson84

Please go ahead and accept the answer if the solution worked for you. If not, can you post more information on your query?

Thanks

0 Karma
Highlighted

Re: How to list & query macros for definitions using the Splunk Javascript SDK?

New Member

Thank you - the answer above helped get me started but service.get() returned a promise. Here is what worked for me (using an already authenticated session):

var http = new splunkjs.SplunkWebHttp();
var service = new splunkjs.Service(http);
service.get('propertiec/macros/<name>/definition')
    .then((definition) => {
        console.log('here is the definition:',definition);
    });
0 Karma
Highlighted

Re: How to list & query macros for definitions using the Splunk Javascript SDK?

Esteemed Legend

It often helps to see how Splunk itself does this. You can logon to your Search Head and run this command (and you can snoop on other aspects with debug tools of your browser):

|rest/servicesNS/-/-/configs/conf-macros splunk_server=local | dedup id | table eai:acl.owner eai:acl.sharing disabled title definition validation errormsg | rename eai:acl.* AS * | sort 0 title
0 Karma